[strongSwan] Any simple example for davici lib ?

Hello, davici lib https://github.com/strongswan/davici contains some example code in tests directory, but I'm still not able to keep apart what is only used for internal tests there, and what is needed for talking to a real charon deamon. Can anyone please help with a simple example, just on

Re: [strongSwan] Any examples for route-based vti-ip4-in-ip6 ?

no multicast tests made). Happy Easter ! Thomas Von: Users im Auftrag von Thomas Rudolph Gesendet: Dienstag, 7. April 2020 12:00 An: users@lists.strongswan.org Betreff: [strongSwan] Any examples for route-based vti-ip4-in-ip6 ? Hello, I'll try to setup

[strongSwan] Any examples for route-based vti-ip4-in-ip6 ?

Hello, I'll try to setup net2net connection ip4-in-ip6. I have already working setup ip4-in-ip6 policy based, without vti interfaces. And also working setups with vti interface, ipv4-in-ipv4. But now I need any hints/examples to use vti interface for ipv4-in-ipv6. I looked at https://www.strongs

Re: [strongSwan] IPv6 tunnel and IPv4 traffic: no routing entries in table 220 ?

Hi Tobias, oh wow I really have "Ein Brett vorm Kopf" yes it works now, thank you very much. Regards, Thomas -Ursprüngliche Nachricht- Von: Tobias Brunner Gesendet: Mittwoch, 29. Januar 2020 13:54 An: Thomas Rudolph ; users@lists.strongswan.org Betreff: Re: [strong

[strongSwan] IPv6 tunnel and IPv4 traffic: no routing entries in table 220 ?

licy based VPN). ? Can anyone please give a hint ? Regards, Thomas -- Thomas Rudolph Teleconnect GmbH Am Lehmberg 54, 01157 Dresden, Germany Phone: +49 351 4236 214 (Main: - 210) E-Mail/Skype: r...@teleconnect.de<mailto:r...@teleconnect.de> Watch our curre

Re: [strongSwan] updown script not called

Ther’s no „CHILD SA established“ message in my Up/Down output below. I think that’s the problem. My wrong assumption was updown is called if IKE SA is established. Von: Noel Kuntze Gesendet: Donnerstag, 28. November 2019 18:11 An: Thomas Rudolph ; users@lists.strongswan.org Betreff: Re

Re: [strongSwan] updown script not called

Berlin Tel.: +49 30 565862610 Web: www.telco-tech.de Amtsgericht Potsdam-Stadt HRB 55 79 Geschäftsführung: Bernd Schulz Silke Schirmer Am 28.11.19 um 16:53 schrieb Thomas Rudolph: > It must be something very simple and stupid I'm doing wrong, on several > machines all the same, updown-s

Re: [strongSwan] updown script not called

meone please enlighten me .. -Ursprüngliche Nachricht- Von: Users Im Auftrag von Thomas Rudolph Gesendet: Donnerstag, 28. November 2019 17:14 An: users@lists.strongswan.org Betreff: Re: [strongSwan] updown script not called Hello Christoph, it is an absolute path. -Ursprüngliche Nachricht- V

Re: [strongSwan] updown script not called

Geschäftsführung: Bernd Schulz Silke Schirmer Am 28.11.19 um 16:02 schrieb Thomas Rudolph: > Hi, > > please help, I try to use custom updown script in swanctl.conf child > section. > > I only replaced original _updown with path to own script. > > * Updown plugin is loaded > * CHILD

[strongSwan] updown script not called

Hi, please help, I try to use custom updown script in swanctl.conf child section. I only replaced original _updown with path to own script. * Updown plugin is loaded * CHILDSA comes up/down successful * Script is executable and from everyone accessible Regards, Thomas . -- Thomas

[strongSwan] Where to define default proposals ?

-defaults and define proposals in default-sections , they are not used. I also wonder where I can change proposals who are used if I use the word "default" as proposal, or don't define any proposal at all ? Regards, Thomas . -- Thomas Rudolph Teleconnect GmbH Am Lehmberg 54, 01157 D

Re: [strongSwan] IPsec / ESP traffic counters ?

Thanks Tobias, ok so it's only the lifetime and stats from "ip -s xfrm state" . -Ursprüngliche Nachricht- Von: Tobias Brunner Gesendet: Donnerstag, 10. Oktober 2019 15:57 An: Thomas Rudolph ; users@lists.strongswan.org Betreff: Re: [strongSwan] IPsec / ESP traffic counte

[strongSwan] IPsec / ESP traffic counters ?

Hi, are there any traffic counters available ? Not for IKE control messages, but for IPsec/ESP traffic ? I'dont have interface based setup, only xfrm policy. Can anyone please help or give a hint where to look ? Regards, Thomas -- Thomas Rudolph Teleconnect GmbH Am Lehmberg 54, 01157 Dr